Current Status

This blog is not frequently updated because most case-by-case scam reports are now listed in subordinate blogs. At this point in time, most of my efforts are targeted at documenting employment scams in the Suckers Wanted blog.


Job Scam: Global Austrian Syndicate (

The "Global Austrian Syndicate" crooks are at it again. They've done the same thing before with and, and recently they wore a different hat with Those domains have all been neutered, so this time they're back with "". Specifically, this spam links to

At the time of writing, the one nameserver for the domain which was responding (at gave the following answer to an address query.

; <<>> DiG 9.3.1 <<>> A @
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56905
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 2

;               IN      A

;; ANSWER SECTION:        1800    IN      A        1800    IN      A        1800    IN      A        1800    IN      A        1800    IN      A

;; AUTHORITY SECTION:        1800    IN      NS        1800    IN      NS

;; ADDITIONAL SECTION:       1800    IN      A       1800    IN      A

;; Query time: 222 msec
;; WHEN: Tue Jun 27 04:36:58 2006
;; MSG SIZE  rcvd: 190

I'm leaving it as an exercise to the reader to determine whether the addresses returned in this query are customer systems on broadband networks, as has been the case in times past. (Hint: yes, they are.)

No comments: